series

How Domain Infrastructure Works

From DNS root servers through WHOIS/RDAP to TLS fingerprinting and bot detection — the full stack.

For: Developers building DNS tools, domain scanners, or anti-detection systems

4 parts

Start reading

Parts

  1. 1
    DNS Resolution: The Full Picture How DNS resolution works — root servers, TLD nameservers, record types, response codes, zone files, and why queries are nearly invisible.
    guide 🪴 budding
  2. 2
    WHOIS Is Dead, Long Live RDAP ICANN sunsetted WHOIS in January 2025. RDAP replaced it — structured JSON over HTTPS instead of plaintext over TCP. Here's what changed and why it matters. Requires: DNS Resolution: The Full Picture
    note 🪴 budding
  3. 3
    How Websites Detect Bots in 2026 — JA4 / JA4T Fingerprints, TLS, and HTTP/2 Cloudflare, Akamai, and DataDome bot detection explained: JA4 TLS fingerprints (t13d1516h2_…), JA4T TCP, HTTP/2 SETTINGS, and HTTP/2 frame order. Based on empirical packet captures.
    article 🌳 evergreen
  4. 4
    Domain Registration: From ICANN to Your Browser How domains move from ICANN through registries and registrars — the three-tier model, EPP, lifecycle states, and what happens when a domain drops. Requires: DNS Resolution: The Full Picture
    note 🪴 budding

Dead internet theory? Working as designed.

This series is AI-drafted — that's the premise, not an accident.